Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e203432333636.roa
File: 3133302e3138352e3131362e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: KLBBQd+e6o3FTeCvrjAZozgEVOClOezk+sRsWnBJdAU=
Subject key identifier: 62:B7:41:E4:E0:7C:8A:51:30:8E:75:76:38:F7:69:E1:A8:E8:D0:A8
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 3888B18BC549023A0E9B84A54F00AC8DB9779BA6
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:24 +0000
ROA not before: Mon 10 Apr 2023 08:14:24 +0000
ROA not after: Mon 08 Apr 2024 08:19:24 +0000
asID: 42366
IP address blocks: 130.185.116.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:88:b1:8b:c5:49:02:3a:0e:9b:84:a5:4f:00:ac:8d:b9:77:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:24 2023 GMT
Not After : Apr 8 08:19:24 2024 GMT
Subject: CN=62B741E4E07C8A51308E757638F769E1A8E8D0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7c:57:be:4d:87:8a:e3:6a:31:aa:3d:50:1b:
b4:19:e7:70:43:53:e1:d5:0b:b1:e2:bb:a1:63:40:
97:da:c3:a0:18:a1:ad:b9:1b:75:49:d0:a2:bb:bf:
c7:8b:4c:66:8a:a4:40:13:8f:1e:76:fb:d9:bd:0a:
af:40:e5:0f:fd:2d:11:d1:5b:7b:e6:4f:3f:e3:ed:
a7:cc:4e:f8:98:5f:a6:89:f6:9c:5d:86:c7:70:f1:
bb:3d:de:fc:ed:99:fd:00:89:74:d8:05:83:86:03:
45:1f:04:d6:52:a6:4d:ac:26:e4:b0:1b:96:2b:23:
a1:67:0a:93:df:f9:a5:3e:92:79:fb:10:e2:fd:df:
49:aa:1a:c5:51:a7:eb:49:b4:46:01:b8:4d:6d:69:
5a:04:5c:bc:91:8f:d2:5f:1a:76:b9:31:57:c8:f4:
85:06:77:48:6e:2c:4e:70:fa:f7:98:93:e7:d9:f4:
0d:35:ec:70:14:fd:55:86:10:df:1d:c3:dd:13:3a:
4d:7f:04:67:54:3b:42:58:01:55:30:ea:e0:28:57:
94:87:14:6b:1b:69:33:ea:a4:bf:d1:74:24:75:07:
51:68:3b:5b:6a:64:3e:49:ed:65:19:49:c1:95:02:
c7:d8:74:a5:81:74:93:9c:24:32:f9:ed:22:2c:e8:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:41:E4:E0:7C:8A:51:30:8E:75:76:38:F7:69:E1:A8:E8:D0:A8
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3133302e3138352e3131362e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.116.0/23
Signature Algorithm: sha256WithRSAEncryption
78:b1:e1:1e:8e:97:0e:4a:cf:69:07:51:29:b2:d6:3c:0f:85:
3c:95:05:18:e5:3a:4d:d9:6d:7b:b8:a5:18:b4:3c:fb:16:85:
00:8d:8a:d6:a6:b2:0d:c9:3d:d7:26:ff:89:95:49:44:af:a6:
83:ff:84:a5:cb:4c:41:a4:d3:c8:5f:64:7a:43:50:41:f4:c4:
51:fc:66:aa:8a:b2:9b:f0:9d:d4:1a:91:32:cf:da:01:31:9e:
ec:17:71:dd:9f:a3:e0:09:3a:24:37:2b:5e:6d:d0:a8:7a:64:
7f:6d:26:29:c4:0b:05:a3:fd:66:80:ab:b7:00:a6:53:69:42:
17:68:f6:a8:c8:14:06:02:0f:d3:42:23:6c:c9:b0:26:c1:4d:
32:36:67:77:b4:3a:ab:7e:fe:a5:4c:10:73:27:5a:bb:b5:d9:
d5:ec:5c:a6:3d:db:93:fb:29:4b:ac:0f:f5:af:ba:aa:bb:13:
4a:4e:68:59:6b:c8:59:93:19:b8:ed:f7:75:fe:46:33:85:38:
85:83:f4:5e:8f:17:c9:32:8c:5c:80:3a:5c:f9:37:bf:6c:31:
20:40:66:c6:28:88:a2:78:12:4d:51:29:a0:00:f2:da:56:fe:
b3:24:bc:0a:bf:2a:d2:94:ad:aa:7f:11:d4:f7:4d:08:dc:1a:
5b:62:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:03 2023 by rpki-client on console-fra.rpki-client.org